Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier: g3SqCOVBw0f04DZ6poWqKuKodLPFqNUFnZfp8yqlVZE=
Subject key identifier: E4:5D:30:61:25:ED:CD:7F:51:52:88:DE:D8:77:9F:A5:8B:9B:31:76
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 019D3909E30389B2B4E4EAE382CB664ED1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 10:00:42 +0000
Manifest this update: Sun 29 Mar 2026 10:00:42 +0000
Manifest next update: Mon 30 Mar 2026 10:00:42 +0000
Files and hashes: 1: 2D2Vo659VCE7_dNsyKDY_ySnp_s.roa (hash: LZcXs72e2WHugD8ordyBZAMfRGav21lT1gfAGNPJNRQ=)
2: K-3AW1zodZQo96foEv6vSPWnznA.roa (hash: 3dK44a2XFe/Ax80oJyqlgMjQENi9InYwps3O9K6x3VI=)
3: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: S1cIMkaLofB11Be2Jc2+ptxoDd/VYkyWGLvjQhQN/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e3:03:89:b2:b4:e4:ea:e3:82:cb:66:4e:d1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Mar 29 10:00:42 2026 GMT
Not After : Mar 30 10:00:42 2026 GMT
Subject: CN=e45d306125edcd7f515288ded8779fa58b9b3176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d2:a3:3c:c7:b1:47:8e:6e:00:9d:2d:2c:0c:
1c:98:69:b7:39:98:ec:28:cd:09:d2:36:b3:05:17:
60:fe:9d:67:8b:a4:87:1e:ad:17:8b:16:ae:00:03:
99:c5:45:52:f1:74:01:af:94:cb:91:bc:10:8c:2e:
f0:b1:d4:ad:55:a6:f7:f2:c2:46:94:5e:17:2f:11:
9a:27:31:1c:5f:b4:66:c2:a8:a9:43:48:40:8b:c6:
04:e8:db:7a:2d:fc:c2:98:8e:a6:10:f5:6b:ab:b8:
83:1a:4c:bc:1a:09:af:7b:b3:44:ee:d0:74:96:97:
9c:57:28:af:fe:34:cb:2f:09:e9:b7:2b:bc:35:6d:
5f:0f:22:a2:c3:73:d4:1d:09:2b:d0:d6:7f:dd:17:
24:8b:8a:04:2f:04:3a:ef:e1:dd:ce:e8:de:54:4b:
1a:cd:ea:58:b4:fb:bf:a8:ed:c3:16:26:f7:9b:07:
e8:14:19:5a:a5:6e:93:82:ee:62:15:80:e7:16:d6:
0c:91:2c:dc:e9:f3:29:f6:16:c1:db:9f:27:a3:b2:
f2:36:97:5a:28:61:9e:59:b1:0f:50:ed:68:90:a7:
73:59:94:96:3f:71:69:65:7b:25:9e:86:ec:d5:ae:
ae:e7:a3:fa:68:a9:54:2e:64:56:f4:cd:a5:9e:56:
d5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5D:30:61:25:ED:CD:7F:51:52:88:DE:D8:77:9F:A5:8B:9B:31:76
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e6:e8:c6:16:e7:ea:17:c7:08:06:6f:5a:02:6e:10:6c:66:
f0:4e:eb:25:42:a2:41:a3:43:7b:ab:4c:96:5b:79:a2:fb:e3:
37:b6:98:8e:5d:13:86:5c:a4:c4:6a:2c:45:10:1b:a3:14:a0:
8d:05:8b:33:c0:c0:c0:ff:59:fc:9c:f6:b0:17:35:f5:63:32:
3e:8a:be:7a:f8:b5:f4:92:1f:d6:e3:d3:e4:2d:15:e0:4b:87:
77:1f:de:5c:83:e5:5e:40:6f:b9:d8:20:f4:fd:27:72:ff:0e:
c0:21:b9:af:4c:a5:8b:79:e8:34:5a:ec:ae:3e:fa:df:27:3d:
bf:0a:25:4f:85:7d:8c:77:38:63:50:e4:cc:be:a5:e2:48:4d:
59:b6:cd:33:61:2b:4d:f3:58:00:c6:9e:77:57:63:2f:c9:b0:
48:78:df:8b:c9:b2:b6:6c:0f:a6:9c:5d:66:52:dc:54:c5:d2:
2f:f9:bd:30:27:19:f8:53:36:94:98:59:f1:9f:18:63:06:7c:
a4:e0:ce:d9:d9:1b:22:a1:f8:5d:50:78:63:a5:02:3e:ac:87:
13:10:e0:24:c3:80:b8:8f:27:c6:54:eb:f1:8c:c2:4b:b0:28:
8e:fd:e9:d1:de:13:60:6a:71:d1:ae:b4:1e:a8:20:61:d7:15:
9d:b5:21:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:08 2026 by rpki-client